Hey all, I have an 802.1x profile going out to our 384 Lion managed clients. Unfortunately when making a change (the only way, it seems, to see how many computers a profile has gone out to) it says that there are only 225 clients that have this profile. As we transition to our new wireless security, this is a big problem that 160 clients are not getting the 802.1x profile. Why would a configuration profile not be going out to all managed clients? Do I have to delete this one and try a new one?

HI all, I am experimenting with a number of MCX's in 10.8 (yeah yeah, use config profiles. I'm using MCX for some things, deal). I've made several changes to a few MCXs, the screen saver lock MCX we have, for example. Originally I had it set as this: com.apple.screensaver askForPassword acaldwell (User) always 1 askForPasswordDelay acaldwell (User) often 0 idleTime acaldwell (User) often 1200 I later changed it to read: com.apple.screensaver askForPassword acaldwell (User) always 1 askForPasswordDelay acaldwell (User) often 0 idleTime acaldwell (User) always 600 But for whatever reason I cannot get the Mac to refresh it's MCX settings. I've used jamf mcx -user acaldwell about a hundred times, rebooted, reset P

Is anyone experiencing consistent 5+ minute delay on logins for machines bound to Win AD 2008 R2 on Lion only? ML does not seem to have this issue. We've regressed the issue to the point that it might be caused by some configuration issue when using the Casper bind as part of the imaging process. I know the question is a bit vague, but I don't want to overdetermine this. Thank you!

We will have a policy set up to run between 0000-0600 (using the every30 trigger), and we want it to run only if loginwindow is the active process. So my thought is the policy will run a script, check running processes, if loginwindow is the process, run the rest of the script, else exit... Any advice from the scripting gurus? Jared? Thomas? Sean? :) Thanks,Don

Is anyone else having this issue using chrome, with version 8.61? The last item in that "headder" row wraps below and often overlays over other items. Everything displays alright with Safari - so I guess I'll have to use that if it bothers me too much.

We have made the investment in Casper to begin the process of enabling the support of Mac OSX in our Enterprise, but need to create a formal project that umbrellas implementing full support that includes all the processes and documentation needed by 1st level help desk, 2nd level desktop support etc and so I was wondering if anyone had done something similar and had a project charter/plan they could share.

with the 1.2 update now comes this popup box when trying to use it Could not find supervision certificate. Does anyone know what this means...

Grr, there's a post on here I can't find about using jamfHelper utility window to read a button click from a user as to whether or not they want to run updates. Does anyone know where I can find the code for this, or at least point me in the right direction?

So I'm futzing around with Casper Imaging and the firstRun script that it creates and have run into some frustration with Configuration Profiles and enrolling on OS X client. My test lab is at JSS 8.6 and OS X 10.8.1. There are two scenarios: I specify all of my "must be installed to the boot volume" packages to install at boot time during imaging so they get copied to the firstRun script. I also have a script that runs at reboot that names the Mac, binds it to AD, and runs a jamf enroll command. When the Mac is finished and does it's final reboot, it does not receive any device profiles. I have to log in as a local admin and run a sudo jamf enroll. jamf enroll sees that the Mac is already enrolled, deletes the entry, repushes it's certificate, enrolls it, and device profiles come down immediately. One more reboot and logging in as an end user gets user profilesto come down. Prior to running the enroll command, there isn't even a "profiles"

Hey all, I'm working on a script to rename permissions on accounts moved from Open Directory to Active Directory. As part of the checks (while loop logic) to see if the account exists I am querying AD for the GUID of the account: /usr/bin/dscl /Active Directory/$domain/All Domains/ -read /Users/$user GeneratedUID | /usr/bin/awk '{print $NF;}')" This works great for accounts that do exist in that domain, but if they don't the command fails. (I might have mistyped this from my script, but the logic works ;) ) How can I capture this information into a variable, and have sterr ignore the cases where the command populating the variable fails?

How do you log into self service? Trying to get the limit by groups mechanism to work properly and when a policy is enabled on all machines and scoped to specific groups it still isnt visible under Self Service unless i remove the AD Group. Any ideas would be appreciated

Hi All, I had this before 8.6 & hoped 8.6 resolved, but what we've found is that some MCX settings that are set to Once (READ: User Level At Next Login Only) are being applied Often (READ: User Level At Every Login). Anyone else seen this? is there a Defect-ID?

I've created an Adobe Creative Suite installation, but it only seems to work if you are logged onto the computer as an admin user. As a standard user it doesn't do a full install. Anyone have an idea on what I'm doing wrong?

I've created an Adobe Creative Suite installation, but it only seems to work if you are logged onto the computer as an admin user. As a standard user it doesn't do a full install. Anyone have an idea on what I'm doing wrong?

I'm looking at how to help track down ipads and thought if we had 843 open from the outside and casper logs the IP from a users home or another business (which will be obviously different from our own), is this standard practice, advisable and/or a security concern?

Can't login to my JSS is saying Alerting Table Plugins :( What the heck does this mean!!!! Its been this way for almost an hour.  --Matt Lee, CCA/ACMT/ACPT/ACDTSenior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper AdministratorFox Networks Group

I am getting a standard configuration setup and I was curious how people arranged their docks. With OD MCX, you just drag and drop them into the order you want in WGM and it applies the icons in that order. What is the best way to manage a dock via Casper and make sure the Icon are in the correct order? It seems like it sorts them alphabetically when I add Dock Items into a Policy. I've also tried importing a com.apple.dock.plist into Managed Preferences and it didn't like the nested Dicts.

Maybe it's not supported or maybe I'm doing something wrong but when I try to create a Self Service policy and scope it to an AD user group it doesn't show up for the user. The same policy scoped just a computer or computer group works fine. Also, when I change the trigger to login it works. Is this normal behavior or am I missing something here?

Hi all, I've created a new install of JSS 8.62 on a running on a new install of Server 10.6.8. Global Management Framework: JSS URL both fields are populated with the JSS URL (the top one is the 8443 port and the bottom one 9006 port).In the PKI using the Built-in Certificate Authority.In the Push Notification Certificate, I went through the process of obtaining an APN certificate from Apple and that will expire Oct 2013.In the Computer Management Framework Settings > Security Enable Certificate-Based Communication is ticked as well as Enable Push Notifications for OS X 10.7 or later Computers. I have a three configuration profiles that just don't go anywhere. Currently, for testing, there are two machines in the inventory, one MacPro running 10.7.4 and a MBPro running 10.8.2. In the Inventory I see both machines 'Enrolled' but MDM Capable says 'No' on both.On the 10.7.4 MacPro inventory details page, I see in the Management History I see Management

Hello everyone, We have a specific situation where we want to block access to Guest network for our users, completely. We want them to use our more secure network, even for things such as internet access. Does anyone know of a good way to block access to a particular network or SSID? This can potentially be done with MAC address filtering on the Wireless Router side of things, but I was just wondering if someone knew of a way to do this on a lot of machines on the Mac side.

I'd like to block out most system preferences from pretty much everyone, but I'd like to keep stuff like Wacom and Symantec pref panes accessible. I do not see a way to do this with Casper config profiles. I was under the impression that if the pref pane is installed on the management server you could select it as a restricted pane or not. Anyone know a way around this? I want to block the iCloud, mail/contacts/calendars, sharing, and language panes. Everything else can stay because they either require admin rights or I don't care what they get set to.

A user on this site named donmontalvo turned me onto this way to access the MySQL DB. $ mysql -u jamfsoftware -pEnter password: Welcome to the MySQL monitor. Commands end with ; or g.Your MySQL connection id is 11478Server version: 5.0.92-log Source distribution Type 'help;' or 'h' for help. Type 'c' to clear the current input statement. mysql> show databases;+--------------------+| Database |+--------------------+| information_schema | | jamfsoftware | | test | +--------------------+3 rows in set (0.00 sec) mysql> use jamfsoftware;Database changedmysql> show tables; My next question is how do I view the columns in a table?

We have our users use a backup disk at home and we are finding that with 10.7.5 users are having crazy slow backup time (lockups even) when trying to backup to their backup drives. If we disable spotlight a 9MB backup takes seconds. If we enable spotlight then we find that same 9MB backup would take 1 to 2 hours. For a 60GB backup it says a few weeks and we are only seeing this when both spotlight and time machines are enabled. Anyone else out there have the same issue?

I need to install some trust certificates on our deployed computers. I started a Composer snapshot, installed the certificates in Keychain Access and in Firefox, then I stopped the snapshot. When I test deploy this package it doesn't seem to install the certificates in Firefox. I think it works with Keychain Access though. How can I deploy these .crt certificates? Should I not be using Composer to do this? Happy Friday!

I know Jamf/Casper uses MySQL on the backend for Casper. On our Casper Admin machine I don't see any GUI to access MySQL. I want to see the Tables/Views so I can write custom SQL statements. Where is this done?